Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33302e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          6OhFoZf7lBear3NWh2xtGLoC+/GSdKoZIHRWGaoYN/U=
Subject key identifier:   F9:A0:3C:37:04:A8:99:3B:3C:0F:37:BF:78:FA:EE:FD:9C:02:46:AD
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1036D4FDAA6C5D166D8BF56A6474462AF29F0FEF
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     4230
IP address blocks:        201.30.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:36:d4:fd:aa:6c:5d:16:6d:8b:f5:6a:64:74:46:2a:f2:9f:0f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:c3:9c:b3:b4:38:a1:7f:33:a8:51:03:bd:
                    5c:e3:b6:bb:4d:98:0f:4b:c9:de:8a:a9:8b:b6:96:
                    64:2b:d7:c4:09:95:bf:10:44:60:1a:11:d2:3f:13:
                    55:57:f3:cd:9c:90:6d:9c:6e:c2:31:b4:8f:a1:c5:
                    82:13:f0:24:b9:2d:bf:70:23:17:b1:45:12:56:9a:
                    14:8b:05:c6:6d:c9:0e:43:9d:16:8f:ea:a2:cc:7c:
                    df:29:58:ef:1e:9b:aa:11:ac:7e:3d:08:f2:f2:f9:
                    b4:0f:6b:71:61:64:35:66:e2:85:f9:9b:c3:b5:0a:
                    31:07:ed:82:29:73:e0:08:d6:07:a2:33:40:24:fb:
                    fd:9e:43:1a:fa:06:6c:55:51:00:43:5a:d6:1c:09:
                    42:b1:f6:b5:38:d8:82:57:92:ab:90:f2:32:7f:1d:
                    63:5f:87:f9:53:fd:a9:38:28:48:45:22:13:17:a1:
                    9d:26:1b:d2:98:d8:cd:13:6a:f2:1b:ea:07:8e:4c:
                    26:7f:69:cb:97:dc:e0:1e:e3:c6:36:e9:2a:37:47:
                    53:43:03:6b:0f:ec:dc:f3:05:fa:5c:07:ce:21:d6:
                    fa:55:44:86:e9:39:df:46:c3:2c:03:c7:65:5b:81:
                    db:f8:2d:fd:ef:9f:72:f2:f4:d1:a4:9a:b4:cd:b7:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:3C:37:04:A8:99:3B:3C:0F:37:BF:78:FA:EE:FD:9C:02:46:AD
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:9f:30:6e:32:da:09:46:f5:27:e4:79:41:cc:3c:30:4e:
         f1:7f:79:d8:d1:44:81:f4:91:05:04:66:ac:fe:0c:d8:a3:ef:
         6a:69:17:f6:2c:9c:1f:f3:c3:cc:73:34:00:65:cf:53:3f:44:
         51:b1:90:57:c5:f0:be:d5:09:ae:02:a9:da:b8:30:cc:24:d4:
         0c:4a:77:f5:c1:e0:44:35:9f:9b:2f:a0:8e:92:8a:55:57:e7:
         2d:ad:df:0a:e5:79:06:b2:23:01:e4:e0:61:5e:f8:e0:6a:4e:
         17:6e:0e:1f:72:72:04:a0:86:2b:6a:ed:3c:df:6c:77:14:8d:
         bf:1c:61:8c:77:6f:dc:76:04:7f:02:26:d2:2b:da:9e:9d:af:
         75:1c:42:b7:8c:65:30:2b:49:00:d1:11:90:ae:e5:07:8a:80:
         8d:83:a5:01:fb:63:12:3e:f6:ea:73:dc:8a:82:25:00:92:be:
         7d:02:d1:23:c8:77:3d:e5:81:20:4c:f6:a8:cc:86:53:92:c9:
         89:a6:bd:4d:0a:41:b0:57:3d:88:e8:4a:93:f4:e7:af:05:9d:
         2d:a9:80:30:ab:06:18:5c:7c:2f:3f:31:99:41:17:4b:8e:68:
         75:92:f0:2f:98:49:c4:cc:a1:99:5b:8f:44:84:e3:d9:9a:ab:
         c2:0a:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org